openstack/ansible-hardening
Code Issues Proposed changes
ansible-hardening/doc/metadata/rhel7/RHEL-07-020630.rst
Major Hayden 0eef112699 Refactor login.defs adjustments [+Docs] 
This patch refactors the login.defs adjustments into a single task
that loops over a variable. It also adds tasks for RHEL-07-010200,
RHEL-07-010420, and RHEL-07-020230.

Documentation is included.

Implements: blueprint security-rhel7-stig
Change-Id: I7c1f869d87338547da8943d5aa506ceb871cee68
2016-12-02 13:38:27 +00:00

576 B
Raw Blame History

---id: RHEL-07-020630 status: implemented tag: auth ---

The CREATE_HOME variable is set to yes by the tasks in the security role. This ensures that home directories are created each time a new user account is created.

Deployers can opt out of this change by setting the following Ansible variable:

security_shadow_utils_create_home: no

Note

On CentOS 7 and Red Hat Enterprise Linux 7 systems, home directories are always created with new users by default. Home directories are not created by default on Ubuntu systems.